Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: 1cwSDamQzhjKnuZ1xiC1m8FpucmAiOBhwzHxILUYAtc=
Subject key identifier: 33:38:61:E4:0C:66:42:80:CF:30:40:7F:FF:88:19:4E:4A:8E:75:D6
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 019A50E2ECC5D08B6024028D5E231AC2D32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0C5E
Signing time: Tue 04 Nov 2025 22:00:40 +0000
Manifest this update: Tue 04 Nov 2025 22:00:40 +0000
Manifest next update: Wed 05 Nov 2025 22:00:40 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: Sli2EG0wqTsYM8fezx8V8KU5bE24jbeEAc0TIbBMrr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:ec:c5:d0:8b:60:24:02:8d:5e:23:1a:c2:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Nov 4 22:00:40 2025 GMT
Not After : Nov 5 22:00:40 2025 GMT
Subject: CN=333861e40c664280cf30407fff88194e4a8e75d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:2d:f0:63:48:56:87:e5:1f:c5:6b:48:ae:
9d:e7:63:f4:44:2c:fd:6c:f4:65:28:f6:6b:3b:50:
35:95:45:cd:80:18:6b:76:1e:c9:65:bd:68:f4:5c:
8b:27:86:1f:0d:65:d7:2e:1e:14:38:b4:34:65:21:
1f:72:ca:e1:d0:d4:7d:87:77:87:60:c4:07:29:ec:
f2:e9:32:b7:8c:7d:4c:50:6f:c2:e1:a0:1c:0b:4a:
cd:34:f1:d7:f9:d1:71:53:1a:51:9c:6e:96:24:a8:
eb:d5:ab:da:6f:e6:f5:54:2c:96:ab:ce:7d:e9:ca:
4e:95:8a:bf:7f:f0:c3:5b:c2:2b:6a:39:68:0b:ff:
86:92:c0:97:74:b0:95:ae:83:7a:50:f8:6a:7f:53:
38:e3:9a:21:a4:20:57:e4:67:b7:7e:07:43:19:96:
3b:e8:94:c0:26:4f:c1:dc:a5:99:2e:bd:ee:44:8f:
80:fd:96:67:a2:d2:98:9d:f1:8f:15:37:8e:cb:92:
06:88:a2:34:83:2b:0c:82:d3:ee:34:ba:98:f3:57:
8b:fa:37:f4:15:ed:b1:88:22:1a:a7:4e:fc:92:20:
04:48:22:3f:58:04:5b:9c:3a:3c:47:ef:f4:f8:33:
12:75:12:7e:27:2b:83:92:30:da:58:67:10:ab:34:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:61:E4:0C:66:42:80:CF:30:40:7F:FF:88:19:4E:4A:8E:75:D6
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8a:2b:ec:e7:34:24:e4:a9:8b:90:fb:88:bc:0b:2f:08:0e:
18:93:55:bc:fb:dc:71:43:aa:57:9e:de:88:9b:a7:9d:12:70:
8e:68:de:73:9f:1e:11:b1:30:7e:32:0e:e9:22:60:f0:cc:fe:
f6:4d:e4:de:b5:0e:1c:06:47:ad:ea:bf:6b:2b:af:ea:9d:14:
f6:4f:db:c7:32:f8:03:c0:78:18:9b:34:2f:ec:08:a6:b9:7d:
7e:d2:a5:40:a2:af:19:f2:b8:b3:2f:fc:98:2e:b7:6e:7e:07:
5a:ac:9f:6c:fd:93:6b:e4:09:23:2e:5d:b9:49:da:e3:d5:8c:
59:c2:2d:47:31:51:b6:cc:90:e8:f6:d7:5d:44:f6:09:5d:6b:
f4:a9:9c:70:c0:b4:e2:72:07:a1:d0:df:d5:66:16:7d:2d:04:
f4:48:d6:f9:91:55:fc:77:03:1d:bb:40:74:99:cd:6f:ec:a4:
ec:1c:2a:08:c8:0c:0c:e4:f4:1e:0c:7d:3b:2c:b4:c9:e7:e1:
5b:55:c6:bf:3e:bd:65:d0:bf:84:d9:11:51:82:a4:7a:42:d8:
c1:3c:81:4e:48:c0:1e:bf:67:b5:e2:e6:10:f8:df:ea:62:c9:
19:da:64:99:b5:ec:c4:d9:1a:d7:54:6c:70:df:54:16:91:2f:
1f:af:06:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uzF0ItgJAKNXiMawtMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5
ZTk0NDcwHhcNMjUxMTA0MjIwMDQwWhcNMjUxMTA1MjIwMDQwWjAzMTEwLwYDVQQD
EygzMzM4NjFlNDBjNjY0MjgwY2YzMDQwN2ZmZjg4MTk0ZTRhOGU3NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLQt8GNIVoflH8VrSK6d52P0RCz9
bPRlKPZrO1A1lUXNgBhrdh7JZb1o9FyLJ4YfDWXXLh4UOLQ0ZSEfcsrh0NR9h3eH
YMQHKezy6TK3jH1MUG/C4aAcC0rNNPHX+dFxUxpRnG6WJKjr1avab+b1VCyWq859
6cpOlYq/f/DDW8IrajloC/+GksCXdLCVroN6UPhqf1M445ohpCBX5Ge3fgdDGZY7
6JTAJk/B3KWZLr3uRI+A/ZZnotKYnfGPFTeOy5IGiKI0gysMgtPuNLqY81eL+jf0
Fe2xiCIap078kiAESCI/WARbnDo8R+/0+DMSdRJ+JyuDkjDaWGcQqzQYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM4YeQMZkKAzzBAf/+IGU5KjnXWMB8GA1UdIwQY
MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt
YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz
LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYor7Oc0
JOSpi5D7iLwLLwgOGJNVvPvccUOqV57eiJunnRJwjmjec58eEbEwfjIO6SJg8Mz+
9k3k3rUOHAZHreq/ayuv6p0U9k/bxzL4A8B4GJs0L+wIprl9ftKlQKKvGfK4sy/8
mC63bn4HWqyfbP2Ta+QJIy5duUna49WMWcItRzFRtsyQ6PbXXUT2CV1r9KmccMC0
4nIHodDf1WYWfS0E9EjW+ZFV/HcDHbtAdJnNb+yk7BwqCMgMDOT0Hgx9Oyy0yefh
W1XGvz69ZdC/hNkRUYKkekLYwTyBTkjAHr9nteLmEPjf6mLJGdpkmbXsxNka11Rs
cN9UFpEvH68GDQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:21 2025 by rpki-client